FEDORA-2020-075cc71cb8 created by pbrezina a year ago for Fedora 33
unpushed

This update does not work correctly and breaks log in with Kerberos. Please ignore. As a workaround, please downgrade back to sssd-2.4.0-2.

This update has been submitted for testing by pbrezina.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

Would like to try it out as I was also seeing a significant amount of CPU cycles spent on sssd-kcm, but isn't there an easier way of installing this without having to download all the rpms?

User Icon karolherbst commented & provided feedback a year ago
karma

found a script to download it, installed it and now the tools from krb5-workstation and SSO login through chromium is broken

This update has been pushed to testing.

a year ago

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

a year ago
User Icon bojan commented & provided feedback a year ago
karma

Cannot login using Kerberos any more.

Thank you for the feedback. Apparently there is a problem with upgrade path when old credentials still remain.

To fix it either remove all existing credentials: systemctl stop sssd-kcm && rm /var/lib/sss/secrets/*

Or run kdestroy/kinit to overwrite them if you are still logged in as the target user.

This update has been unpushed.

yeah, it works now with removing the cache. The way through kdestroy/kinit didn't work out.

Also it doesn't fix the issue I hoped it would fix :/ (general CPU overhead when goa polls). Only have two credentials and after chromium/pulseaudio sssd-kcm is the biggest CPU user of my desktop.

Oh well. But glad to see that some of the CPU overhead is being worked on :)

Fixing GOA polls is still work in progress, but we are working on it.

User Icon eparis provided feedback a year ago
karma
User Icon eparis commented & provided feedback a year ago
karma

After updating in updates-testing krb5 is dead for me.

$klist klist: Credentials cache I/O operation failed while resolving ccache $ kdestroy kdestroy: Credentials cache I/O operation failed while resolving ccache

I ran systemctl stop sssd-kcm && rm /var/lib/sss/secrets/* but that didn't get me back to life. No other changes made

Not sure what I was supposed to do but I did:

# dnf downgrade sssd-2.4.0-2.fc33.x86_64 sssd-kcm-2.4.0-2.fc33
# systemctl enable sssd-secrets.socket sssd-kcm.socket
Failed to enable unit: Unit file sssd-secrets.socket does not exist.
# systemctl start sssd-kcm.socket

And now I'm back alive. whew.

User Icon mrunge commented & provided feedback a year ago
karma

Downgrading sssd (and dependencies) to sssd-2.4.0-2 got me back to working krb5

pbrezina edited this update.

a year ago

This update has been submitted for testing by pbrezina.

a year ago

This update is unpushed so I'm not sure why you are still able to update, but:

This update does not work correctly and breaks log in with Kerberos. Please ignore. As a workaround, please downgrade back to sssd-2.4.0-2.

A new update with a fix will be available shortly.


Please login to add feedback.

Metadata
Type
unspecified
Karma
-4
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
a year ago
in testing
a year ago
modified
a year ago

Automated Test Results